Senior Security & Compliance Engineer (SaaS)

twentysix; Austin (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Code and Theory seeks a Senior Security Engineer to be the hands-on backbone of security across our SaaS products and client delivery. You will own the implementation of controls, tooling, automation, and processes to keep products and data secure, collaborating with engineering teams and embedding security into delivery workflows.

Our team is AI-native, advancing secure software development with AI, and you will help scale security across cloud infrastructures and multi‑tenant environments

Qualifications

• 5+ years of hands-on security engineering experience in SaaS or agency delivery.
• Deep practical cloud security knowledge (IAM, networking, logging, secrets management).
• Hands-on SOC 2 Type II and ISO 27001 implementation experience.
• Experience automating security in CI/CD pipelines and policy enforcement.
• Proficiency with security monitoring/SIEM and incident response.
• Familiarity with HIPAA, GDPR, CCPA/CPRA compliance controls.

Responsibilities

• Build and maintain security controls across cloud infra and SaaS products.
• Own SOC 2 Type II, ISO 27001, and ISO 42001 compliance; automate testing and artifacts.
• Operate security monitoring across GCP/AWS/Azure; threat detection and response.
• Embed security into CI/CD with vulnerability scanning and SAST/DAST tooling.
• Implement data privacy controls aligned to regulatory requirements.
• Conduct vendor security assessments and review third-party architectures.
• Maintain and test incident response playbooks; lead forensic analysis during security events.
• Develop AI-specific security controls for agent workflows; review prompts and data handling.

Skills

Cloud security

SOC 2 Type II

ISO 27001

CI/CD security

Threat detection

SIEM tooling

Data privacy controls

AI security

Vulnerability scanning

Communication

Tools

Checkov

tfsec

OPA/Rego

Job description

Code and Theory seeks a Senior Security Engineer to be the hands-on backbone of security across our SaaS products and client delivery. You will own the implementation of controls, tooling, automation, and processes to keep products and data secure, collaborating with engineering teams and embedding security into delivery workflows.

Our team is AI-native, advancing secure software development with AI, and you will help scale security across cloud infrastructures and multi‑tenant environments